Unscored severity · published Feb 17, 2015
CVE-2014-9466
Open-Xchange (OX) AppSuite and Server before 7.4.2-rev42, 7.6.0 before 7.6.0-rev36, and 7.6.1 before 7.6.1-rev14 does not properly handle directory permissions, which allows…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Open-Xchange (OX) AppSuite and Server before 7.4.2-rev42, 7.6.0 before 7.6.0-rev36, and 7.6.1 before 7.6.1-rev14 does not properly handle directory permissions, which allows remote authenticated users to read files via unspecified vectors, related to the "folder identifier."
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OA
Open-xchange Appsuite · Open-xchange
7.4.2; 7.6.0; 7.6.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-9466
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-9466
packetstormsecurity.com
http://packetstormsecurity.com/files/130379/Open-Xchange-Server-6-OX-AppSuite-7.6.1-Exposure.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/534695/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/72587
www.securitytracker.com
http://www.securitytracker.com/id/1031744
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/100867
More from Open-xchange Appsuite
9.9
CVE-2017-13667
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF
9.8
CVE-2020-12645
OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and /apps/load memory consumption
9.8
CVE-2019-7158
OX App Suite 7.10.0 and earlier has Incorrect Access Control
9.8
CVE-2017-5212
Open-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorrect Access Control
9.8
CVE-2017-5210
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Information Exposure